Set X-Content-Type-Options "nosniff" header.

blueimp · blueimp · commit 9c1f87e35f5c · 2013-04-23T10:58:11.000+02:00
diff --git a/server/php/files/.htaccess b/server/php/files/.htaccess
@@ -7,6 +7,9 @@ ForceType application/octet-stream
   ForceType none
 </FilesMatch>
 
+# Prevent IE from MIME-sniffing:
+Header set X-Content-Type-Options "nosniff"
+
 # Uncomment the following lines to prevent unauthorized download of files:
 #AuthName "Authorization required"
 #AuthType Basic
